What Wordrush keeps about you, why, and how to have it removed.
Wordrush is a daily word puzzle. You can play it without telling us anything. If you create an account, we keep a little so your scores follow you between devices and your name can appear on the day's leaderboard. This page is the whole of it.
Your game in progress, your results and your stats are stored in your own browser (its local storage) and never leave it. Clearing your browser data clears them.
| What | Why | How long |
|---|---|---|
| Your chosen name | To show on the leaderboard and greet you | Until you delete the account |
| Your email address | To let you back in if you forget your password, and to stop one person holding many accounts. It is never shown to anyone and never used for marketing. | Until you delete the account |
| Your password | Stored only as a salted hash (scrypt); we cannot read it | Until you delete the account |
| Your daily results | Score, words, best word and the rounds you played, for your stats and the leaderboard | Until you delete the account |
| A Google identifier | Only if you sign in with Google: the account's ID and verified email, so we know it is you next time | Until you delete the account |
The legal basis for this is that you asked for an account (a contract with you). Accounts are for people aged 13 and over.
One cookie, wr_user, keeps you signed in for 90 days. It is
strictly necessary for the account to work, contains no personal data (an
account number, an expiry and a signature) and is not used for tracking. There
are no advertising or third-party cookies.
We count visits, games started and finished, sign-ups and shares, and we record errors so they can be fixed. This uses no cookies and stores no IP addresses: each event carries a one-way hash of your address and browser that changes every day, so we can count how many people visited without knowing who any of them were or following anyone from one day to the next. Events are kept for 90 days.
Nobody, except the services that run the site: it is hosted by Fly.io in London, and password-reset emails are sent through an email delivery service. If you use "Continue with Google", Google's own privacy policy applies to that sign-in. We do not sell or share your data.
Questions or requests: getintheprius@gmail.com.